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DETAILED ACTION 

1 . This action is in response to communications filed on July 28, 2005. 



Priority 

2. The Examiner has received the certified copy of the P2001-3603 application, 
filed July 28, 2005. 



Specification 

3. The correction to the title of the application, and the new format applied to the 
application, has been acknowledged. Accordingly, the objections to the specification 
have been withdrawn. 



Response to Arguments 

4. Applicant's arguments filed July 28, 2005 have been fully considered but they 
are not persuasive. Applicant argued that Uskela does not teach or suggest an 
operation, which is unique to the client. Examiner respectfully submits that Applicant 
has misinterpreted the prior art of record. 

Regarding Applicant's arguments, Uskela teaches the client performing a 
decryption involving a key pair for the client, (col. 5, lines 25-32, col. 4, lines 16-45). 
This operation is unique to the client because the key pair includes a secret key that 
uniquely identifies the client, (col. 4, lines 25-30, col. 3, lines 31-56, col. 1, line 65-col. 2, 
line 16). 
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Accordingly the references supplied by the examiner in the previous office action 
covers the claimed limitations. The rejections are thus sustained. Applicant is 
requested to review the prior art of record for further consideration. 

Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 
that form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) The invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21 (2) 
of such treaty in the English language. 

6. Claims 1, 13, 16, 17, 22-26, are rejected under 35 U.S.C. 102(e) as being 
anticipated by Uskela, U.S. Patent 6,721,886. 

7. In considering claim 1 , Uskela teaches a server that provides service to a 
client comprising: a public-key storage unit for storing a public key assigned to each 
service, (col. 5, lines 6-16); a challenge generator for generating a challenge to be sent 
from the server to the client after the server receives a request for the service from the 
client, (col. 5, lines 20-32); and an access privilege verifier for verifying, using a 
corresponding public key, whether a prescribed relationship exists between the 
challenge and a response to that challenge received from the client, (col. 5, lines 20- 
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34); wherein the response is calculated based on a unique operation for the client and 
access privilege proving that data is created from a private key corresponding to the 
public key, (col. 5, lines 25-36). 

8. In considering claim 13, Uskela teaches a server that provides services to 
clients connected to the server via a network, the server comprising: a script interpreter 
for interpreting script designed to control the contents of the service, (col. 4, lines 46- 
55). 

9. In considering claim 16, Uskela teaches a method executed in a server for 
providing service to a client wherein a public key is assigned in advance to a service 
provided by the server, the method comprising the steps of: generating a challenge 
when a request for the service is received from the client, (col. 5, lines 20-32); 
transmitting the challenge to the client, (col. 5, lines 20-32); receiving a response to the 
challenge from the client, (col. 5, lines 20-32); verifying whether a prescribed 
relationship exists between the challenge and the response by using the public key 
assigned to the requested service, (col. 5, lines 32-34); and providing the requested 
service to the client only when the prescribed relationship exists, wherein the response 
is calculated based on a unique operation for the client and a private key corresponding 
to the public key, (col. 5, lines 25-36). 
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10. In considering claim 17, Uskela teaches a method executed in a client for 
requesting service to a server, the method comprising the steps of: receiving a 
challenge from the server, (col. 5, lines 20-32); executing a unique operation assigned 
to the client wherein the unique operation is unique to the client, (col. 5, lines 25-36); 
generating a response based on the challenge received from the server, the result of 
the unique operation, and transmitting the response to the server, (col. 5, lines 20-32). 

1 1 . In considering claim 22, Uskela teaches a system comprising: a server that 
provides service to a client, (col. 4, line 46-col. 5, line 36); a public-key storage unit that 
stores a public key assigned to the service, (col. 5, lines 6-16); a challenge generator 
that generates a challenge to be sent from the server to the client after the server 
receives a request for the service from the client, (col. 5, lines 20-32); an access 
privilege verifier that verifies whether a prescribed relationship exists between the 
challenge and a response, the response being corresponding to the challenge and 
received from the client, and the client that requests the service to the server, (col. 5, 
lines 20-34); the client further comprising: a unique operation executer that executes 
unique operations assigned to the client, (col. 3, lines 31-56, col. 5, lines 25-36); a 
response generator that generates the response to the challenge, the challenge being 
received from the server, wherein the response is calculated based on the unique 
operation and a private key corresponding to the public key, and the unique operation is 
unique to the client, (col. 5, lines 20-36). 
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12. In considering claim 23, Uskela teaches the server sending the challenge to 
the client with a condition for using the service, (col. 5, lines 20-36). 

13. In considering claim 24, Uskela teaches the unique operation is used under 
conditions that a common cryptographic hash function is assigned to all clients (col. 5, 
lines 25-32, col. 4, lines 16-45) and different data is assigned to each client, (col. 4, 
lines 25-30, col. 3, lines 31-56, col. 1, line 65-col. 2, line 16). 

14. In considering claim 25, Uskela teaches a client that requests service to a 
server, comprising: a unique operation executer that executes unique operations 
assigned to the client, (col. 3, lines 31-56, col. 5, lines 25-36); an access privilege 
providing data storage unit that access privilege providing data, the access privilege 
providing data being created from a private key corresponding to a public key assigned 
to the requested service and a result of the unique operation, (col. 5, lines 25-36); a 
response generator that generates a response to a challenge, the challenge being 
received from the server, and wherein the response is calculated based on the result of 
the unique operation and the access privilege providing data, and the unique operation 
is unique to the client, (col. 5, lines 20-36). 

15. In considering claim 26, Uskela teaches the access privilege providing data 
storage unit included in a portable device, (col. 5, lines 25-36). 
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Claim Rejections - 35 USC § 103 

16. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

17. Claims 9, 11, are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Uskela in view of Brown, U.S. Patent 6,487,667. 

1 8. In considering claims 9 and 1 1 , although the teachings of Uskela disclose 
substantial features of the claimed invention, they fail to explicitly teach the server being 
a web server. 

Nevertheless, web servers were well known in the art at the time of the present 
invention. In a similar field of endeavor, Brown teaches a challenge-response technique 
that utilizes keys corresponding to web servers in granting access to the web servers, 
(col. 3, lines 29-65). 

Thus, it would have been obvious to a person of ordinary skill in the art at the 
time of the present invention to modify the teachings of Uskela to show the server being 
a web server, and the public key assigned to individual an individual web page, or 
groups of web pages provided to the client. This would have provided a reliable means 
for authenticating a client before allowing the client to view individual web pages, or 
groups of web pages, Uskela, col. 1, line 5 through col. 2, line 16. 
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Conclusion 

19. THIS ACTION IS MADE FINAL Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

20. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Hassan Phillips whose telephone number is (571) 
272-3940. The examiner can normally be reached on M-F 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Zarni Maung can be reached on (571 ) 272-3939. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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